Senior Security Operations Engineer

What you’ll do

As a Security Operations Engineer at Brex, you will focus on preventing, detecting and responding to security threats across Brex's corporate and cloud environments. You will use existing systems and develop tools to improve our security capabilities. Our team is responsible for functions across corporate security, detection & response and infrastructure security domains; and we perform systems engineering and automation to support those functions.

Security Operations is part of our wider Trust & IT organization which means you will have the opportunity to work closely with Application Security, Corporate Engineering, GRC and IT to improve security configurations, drive positive employee behaviors and generally work to prevent events from becoming incidents. You will also help build and maintain our team’s open source project Substation and contribute to the Brex Tech Blog.

Where you’ll work

This role is based in our San Francisco office. We operate in a hybrid model requiring a minimum of three coordinated days in the office per week (Monday, Wednesday, and Thursday), with up to four weeks per year of fully remote work.

Responsibilities

• Work on a highly cross-functional team to prevent, detect and respond to security threats across Brex's corporate and cloud environments
• Perform security incident response, investigation, remediation, and documentation, and participate in periodic threat hunting and security exercises
• Lead, scope, design, and maintain tools and systems supporting corporate security, detection & response, and infrastructure security
• Collaborate and partner with engineering and operations teams to drive remediation of security issues, balancing SLA prioritization and backlogs
• Care about secure system design, building things correctly, and applying an MVP approach

Requirements

• Bachelor’s degree in Computer Science, Engineering or related field OR equivalent training / fellowship OR 5+ years work experience
• Experience working in a corporate security, detection & response, or infrastructure security role with responsibilities for security alert triage and security incident response
• Familiarity with CI/CD systems and DevOps workflows (e.g. Buildkite, Flux, Git, Terraform) in cloud environments (e.g. AWS, Azure, GCP)
• Experience deploying and maintaining security services and tools (e.g., SIEM, data pipelines, SOAR, domain monitoring, endpoint tooling, email protection, cloud security tools)
• Experience coding in Go and/or Python
• Strong collaborative mindset

Bonus points

• Proficiency with Go and other programming languages
• Experience with securing distributed systems in AWS, cloud, and Kubernetes environments
• Contributions to the wider technical community (open source, public research, mentorship, blogging, etc.)